88 matches found
ALPINE-CVE-2018-19158
ColossusCoinXT through 1.0.5 a chain-based proof-of-stake cryptocurrency allows a remote denial of service, exploitable by an attacker who acquires even a small amount of stake/coins in the system. The attacker sends invalid headers/blocks, which are stored on the victim's disk...
Quest DR Series Disk Backup Software Command Injection Vulnerability (CNVD-2018-15883)
The Quest DR Series are disk storage and deduplication appliances. A command injection vulnerability exists in the "Generate Diagnostics" method in Quest DR Series disk backup software versions prior to 4.0.3.1. The vulnerability can be exploited to execute arbitrary system commands via a special...
Western Digital SanDisk Secure Access Information Disclosure Vulnerability
Western Digital SanDisk Secure Access is a set of file encryption software for SanDisk storage devices from Western Digital. A security vulnerability exists in Western Digital SanDisk Secure Access version 3.01, which originates when the program retains temporary files on disk in plaintext. An...
Cloud WAF Versus On-Premises WAF
“The Times They Are a Changin’”, Bob Dylan knew it in 1964 and what was true then is even move true today. There continues to be ongoing debate on web application firewalls WAFs, specifically which is better for the enterprise—on-premises solutions or those in the ever-changing cloud. When...
CVE-2017-5655
In Ambari 2.2.2 through 2.4.2 and Ambari 2.5.0, sensitive data may be stored on disk in temporary files on the Ambari Server host. The temporary files are readable by any user authenticated on the host...
vdsm: Users attempting a live storage migration create snapshot without snapshot creation permissions
It was discovered that the permissions to allow or deny snapshot creation were ignored during live storage migration of a VM's disk between storage domains. An attacker able to live migrate a disk between storage domains could use this flaw to cause a denial of service...
